CVE-2024-0387
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 3.9 / Impact: 2.5
Source: NVD
Description
The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.
Affected (7)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Eds 4008 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Eds 4009 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Eds 4012 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Eds 4014 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Eds G4008 | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Eds G4012 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 3.2 |
| Running on/with | Platform Versions |
|---|---|
Moxa Eds G4014 | All versions |
References (2)
Source: psirt@moxa.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.